California Cancer Associates for Research and Excellence – Fresno has notified patients that an email phishing incident led to unauthorized access to a small number of email and SharePoint accounts. The organization says it learned of the incident on June 13, 2025, and a subsequent investigation determined that unauthorized parties had actually accessed the accounts between December 13 and December 16, 2024. According to the notification letter, the likely goal of the phishing attack was to further additional phishing schemes, but the accessed emails and files did contain patient information.
The letter was sent to individuals whose name and other information appeared in the affected email or SharePoint files. The template version of the letter does not spell out every data element involved for each person — it references an individual’s specific breached information without listing it in the general text — so if you received this letter, the version mailed to you should identify exactly which of your details were involved.
What information was exposed?
- Your name
- Additional patient information referenced in your personal copy of the letter (the specific data elements are not spelled out in the general notification text reviewed here)
The organization is offering enrollment in Epiq Privacy Solutions ID credit monitoring at no cost. You can enroll at www.privacysolutionsid.com by clicking ‘Activate Account’ and entering the personalized activation code included in your individual letter, then completing identity verification. If you have trouble finding your activation code or enrollment deadline, or have questions about the product itself, you can call 866.675.2006 for assistance.
What should you do now?
- Enroll in the free Epiq Privacy Solutions ID credit monitoring using the activation code in your letter before the stated deadline.
- Review your credit reports from Equifax, Experian, and TransUnion, which you can request free at annualcreditreport.com or by calling 1-877-322-8228.
- Consider placing a fraud alert or a security freeze on your credit files with all three bureaus, since a freeze is free and makes it harder for anyone to open new accounts in your name.
- Because this incident involves patient records at a healthcare provider, watch closely for unfamiliar medical bills, insurance statements, or collection notices that don’t match care you actually received.
- Consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere, including on the dark web.
- If you notice signs of fraud or identity theft, file a report with your local police department and the Federal Trade Commission at ftc.gov/idtheft.
If you have questions about this incident, California Cancer Associates for Research and Excellence can be reached at 855-361-0308, Monday through Friday between 8:00 a.m. and 8:00 p.m. Central Time.